Description
The iThemes Security (formerly Better WP Security) plugin before 7.7.0 for WordPress does not enforce a new-password requirement for an existing account until the second login occurs.
Unscored
CVE-2020-36176
EUVD-2020-23754GHSA-v943-hr28-2mp8
The iThemes Security (formerly Better WP Security) plugin before 7.7.0 for WordPress does not enforce a new-password requirement for an exi…
Published Jan 6, 2021 · Updated Aug 4, 2024 · Assigned by mitre